Senior Endpoint Security & IR Engineer - Remote

Barracuda; Atlanta (GA); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Equity options

Health benefits

Retirement plan with employer match

Career-growth opportunities

Flexible Time Off

Volunteer opportunities

Job summary

Barracuda is seeking a Senior Endpoint Security & IR Engineer to join the incident response team. You will lead management of the SentinelOne XDR platform, conduct complex investigations across client environments, and drive rapid containment of active threats in a fast-paced MSSP setting.

You’ll work with Cyber Concierge, Threat Analysts and Automation teams to improve response capabilities, design detection rules, and perform on-call rotation.

Qualifications

• Minimum of bachelor’s degree in computer science and 5+ years of hands-on experience in incident response, digital forensics, or security operations.
• MSSP, MDR, or consulting experience strongly preferred; ability to manage multiple client engagements.
• Proven track record investigating real-world incidents including ransomware, BEC attacks, lateral movement, data exfiltration.
• GIAC certification required; equivalents considered: OSCP, eCIR, eCDFP, EnCE, SC-200, AZ-500.

Responsibilities

• Lead end-to-end incident response engagements across diverse client environments, from initial triage through remediation and lessons learned.
• Develop and maintain Python scripts for evidence collection, log parsing, IOC enrichment, and automated response actions.
• Build and optimize automated response workflows in Tines to accelerate containment and MTTR.
• Create and tune detection rules in Elastic and SentinelOne based on investigative findings and emerging threat intelligence.
• Serve as the primary IR point of contact for client stakeholders during active incidents.
• Document findings in clear, executive-ready incident reports tailored to technical and non-technical stakeholders.

Education

Bachelor's degree in computer science

Tools

SentinelOne

Binalyze AIR

Elastic

Databricks

Tines

Job description

Barracuda is seeking a Senior Endpoint Security & IR Engineer to join the incident response team. You will lead management of the SentinelOne XDR platform, conduct complex investigations across client environments, and drive rapid containment of active threats in a fast-paced MSSP setting.

You’ll work with Cyber Concierge, Threat Analysts and Automation teams to improve response capabilities, design detection rules, and perform on-call rotation.